Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/jEr0kmG8aEEAMlBxOkaH_oZRoa4.roa
File: jEr0kmG8aEEAMlBxOkaH_oZRoa4.roa (raw, json)
Hash identifier: Gyw3LKoO0tvhY+UOOYclZKFLJ05Q0UBSHDFIuVgx3ww=
Subject key identifier: 8C:4A:F4:92:61:BC:68:41:00:32:50:71:3A:46:87:FE:86:51:A1:AE
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 089BF115
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/jEr0kmG8aEEAMlBxOkaH_oZRoa4.roa
Signing time: Thu 16 Jun 2022 04:37:44 +0000
ROA not before: Thu 16 Jun 2022 04:37:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144437525 (0x89bf115)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 16 04:37:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c4af49261bc6841003250713a4687fe8651a1ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2b:a8:b0:68:c2:87:93:ae:4a:50:90:63:5a:
3d:5a:7f:24:90:e7:eb:d1:9a:32:2f:39:c3:a3:44:
f4:6e:7a:dc:86:d5:f8:ea:d1:19:c8:33:ce:01:c2:
ff:51:7f:a6:45:2d:34:a0:e5:fb:1e:c3:9f:a4:29:
eb:ff:b7:0c:6a:df:f0:e9:57:6e:cb:67:12:f8:6e:
3a:88:54:43:48:4f:21:d7:71:24:6d:fd:e3:33:de:
90:ca:a1:d3:51:0b:85:f2:5b:41:de:a3:c7:56:59:
8b:15:23:71:80:d5:4b:19:ba:20:96:60:50:c3:23:
3f:d3:b2:aa:e2:c6:82:37:c7:93:7c:a7:7d:b2:67:
88:c8:1d:60:ab:cc:cd:05:c6:c8:f9:09:69:47:92:
10:e5:c3:ce:5e:de:ca:99:57:5d:00:62:86:cf:6e:
2c:e4:a0:c0:2f:5b:2b:7b:99:83:9a:e9:e5:99:d9:
5c:14:51:91:a4:da:25:d3:3b:b4:33:77:a3:77:6c:
29:c2:11:0c:99:bc:90:ba:9e:11:50:b9:c7:fb:93:
88:4b:56:29:80:c4:f5:c4:69:fa:de:1b:61:ae:a2:
db:c4:95:64:74:d6:f4:fa:75:a8:f8:75:3f:9a:1f:
e0:a3:93:5e:48:b5:cc:29:d3:d6:4f:4a:cf:98:fe:
3a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:4A:F4:92:61:BC:68:41:00:32:50:71:3A:46:87:FE:86:51:A1:AE
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/jEr0kmG8aEEAMlBxOkaH_oZRoa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
9f:0a:0f:9c:8a:44:d6:4b:22:08:6f:d0:5b:45:1d:d3:bf:c0:
c5:6c:d2:f8:f4:67:3d:df:27:1b:be:53:54:95:92:68:50:8a:
a9:47:61:11:c6:b1:22:77:f3:7f:b2:51:7c:11:c3:8d:58:cb:
15:df:ac:19:14:74:96:21:d6:71:a6:e8:d2:64:dd:d1:08:b5:
96:13:4a:9c:4e:29:c5:7d:0c:70:f2:09:2c:5d:62:8a:a2:f7:
7d:fe:5f:ae:f4:83:b6:f0:18:3e:bb:ba:ef:a3:8a:dd:06:3e:
f9:8a:13:e6:ec:27:13:dc:06:08:1f:c1:d9:a2:44:09:24:b8:
8a:c3:cb:76:a4:08:75:ab:ee:37:6f:c3:73:62:9e:44:b9:91:
24:cc:4f:00:f9:23:4e:be:09:90:53:1a:3c:36:a5:3e:40:be:
07:96:f3:a4:5b:11:b2:ce:ff:b5:50:4b:a4:3c:58:fe:a9:4f:
0b:0c:2a:f6:0e:9e:64:4a:f3:57:b9:63:1f:ba:48:2c:76:10:
c3:da:36:20:b4:b4:0b:9e:6f:91:1e:c9:6a:dd:d1:8d:1b:f9:
1f:6c:cb:75:1e:1e:07:11:cd:7c:3d:65:f0:82:6c:16:ed:18:
34:9b:3b:f8:ab:2e:7a:37:b1:46:c3:25:27:7f:1c:07:73:f4:
0e:7a:ad:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:28:00 2025 by rpki-client